So I’m relatively new to server hosting. (But experienced with remote web hosting from providers.) After about a year of fighting to run Nextcloud on a hosting company and finally losing everything from the cPanel vulnerability a few months ago, I broke down and launched my own home server. I’m looking for advice to maximize security.

CachyOS Linux with ClamAV Docker via Portainer Nextcloud (E2EE), Immich, DocuSeal and NoteTrace Routed through a domain and subdimains via Zero Trust Cloudflare Tunnel and Cloudflare DNS.

I have regular redundant backups both onsite and offsite with Duplicati.

My passwords for OS and all admin dashboards are extremely long, unique, random strings managed by Bitwarden.

I know just enough about this stuff to get into trouble. What else should I setup? I have little to no monitoring going on and don’t know much about that direction.

  • NaibofTabr@infosec.pubEnglish
    1·
    5 hours ago

    I’m not sure you know what SNMP is

    Oops, I was definitely confusing that with ICMP. Good point.

    https://oneuptime.com/blog/post/2026-03-20-block-icmp-firewall-risks/view

    Also Iot devices aren’t really much of a threat.

    I consider it a threat if a device maps my local network, identifies the other devices I have connected, and/or monitors my network traffic and then sends a report on that back to its control server.

    Also don’t put things on the internet. That is generally a really bad idea and will bite you in the butt eventually.

    Ain’t that the truth. We really should just not.